Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
File:                     2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft (raw, json)
Hash identifier:          F9hYfSovH4uZle2kQeg1WAsqN5B3osEBfyOWVLx0e8Y=
Subject key identifier:   FE:1F:99:BB:7F:3B:E8:BE:78:FC:31:92:08:28:A0:E1:93:0F:E3:89
Authority key identifier: 2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB
Certificate issuer:       /CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
Certificate serial:       5853509E8ABA9641327D6A2BA8B2CC0DBA89F723
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
Manifest number:          0401
Signing time:             Wed 13 May 2026 08:57:33 +0000
Manifest this update:     Wed 13 May 2026 08:52:33 +0000
Manifest next update:     Thu 14 May 2026 11:11:33 +0000
Files and hashes:         1: 34352e3136342e3138382e302f32322d3234203d3e20323638363238.roa (hash: 3hYoya6ANFaKoW535qdPR6jcR6oCfDWHaBQds8AayKg=)
                          2: 323830343a353431383a3a2f33322d3438203d3e20323638363238.roa (hash: BScz2I5iQT+7rCvWP0qw7jFvdiEXKt6y7lg7OZfYlKo=)
                          3: 3230382e35322e3136322e302f32332d3234203d3e20323638363238.roa (hash: 7lCIMu9oEv2kVPXwQp1GssQpm/Az1KqVAOJgt+01WZ0=)
                          4: 2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl (hash: LeYB2whDJxstmVhXehfctQ0uq9salE2WW0DLSxCngIE=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl
                          rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:53:50:9e:8a:ba:96:41:32:7d:6a:2b:a8:b2:cc:0d:ba:89:f7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB
        Validity
            Not Before: May 13 08:52:33 2026 GMT
            Not After : May 14 11:11:33 2026 GMT
        Subject: CN=FE1F99BB7F3BE8BE78FC31920828A0E1930FE389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:cf:78:bb:39:eb:b7:4c:59:d2:f0:9a:5d:
                    1d:b6:06:c0:75:fc:ae:36:64:1a:8a:09:ac:5b:d6:
                    00:0f:05:af:08:30:de:ed:fd:36:c2:01:cf:a3:4c:
                    d6:be:89:6f:d9:ee:11:5a:43:f9:ad:7f:59:9a:7f:
                    4b:2b:d5:21:15:a6:74:bd:a5:63:59:9f:2b:ce:50:
                    d5:d5:2d:3a:18:10:05:d5:16:46:20:cd:1d:7d:72:
                    33:7e:38:3e:4b:fd:26:25:51:c4:4d:39:b7:4f:7e:
                    55:15:d4:50:de:83:9d:30:52:c6:78:3f:4b:91:0e:
                    d7:57:20:d7:2e:06:32:f0:19:d6:5d:80:00:3d:3e:
                    20:15:d8:c4:19:ac:d4:74:ca:06:f7:e3:f7:a1:3f:
                    5c:aa:1e:a9:9f:01:d7:16:bd:21:c4:39:5d:f8:fd:
                    48:bd:d2:b1:0a:2c:eb:50:22:b8:ab:b9:6d:ec:e2:
                    23:96:a0:f8:45:86:6e:94:06:b3:52:c0:4e:31:df:
                    06:f5:35:80:a8:8c:bd:68:b0:e6:12:c1:f3:2b:39:
                    6c:5f:d2:f3:81:e2:92:4e:b4:3d:af:0f:e6:9b:c1:
                    25:c3:95:ee:d9:6b:36:1a:70:3f:3e:48:d1:17:c8:
                    bd:73:b1:35:da:f6:4b:31:2e:64:74:c5:e1:b9:55:
                    1f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1F:99:BB:7F:3B:E8:BE:78:FC:31:92:08:28:A0:E1:93:0F:E3:89
            X509v3 Authority Key Identifier:
                keyid:2C:9C:59:4E:93:6E:1E:28:AD:5A:D7:3A:6B:F2:8A:E3:8C:00:28:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/1/2C9C594E936E1E28AD5AD73A6BF28AE38C0028FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:34:e4:95:68:22:06:62:2b:84:dd:67:c0:0c:11:b5:c4:34:
         d1:d0:9d:10:00:2d:e7:08:dd:a4:62:db:14:08:6c:9f:66:fa:
         94:15:3d:83:18:99:b6:e4:b3:dc:50:fa:6f:cc:86:9d:5a:68:
         34:12:a5:8d:70:f8:b0:d7:68:00:65:cc:cb:2e:20:1f:83:d6:
         58:d3:7d:7b:2b:d4:a0:2d:57:9f:90:60:41:10:c2:4c:ab:69:
         a9:9e:4e:33:02:94:26:c2:24:bc:22:2d:2d:38:4f:f7:39:bc:
         9a:2c:31:36:08:42:04:e3:db:3d:db:18:11:46:69:f5:14:c1:
         26:36:c0:90:d5:c5:20:bd:b8:77:1d:c1:7c:eb:87:b9:44:ce:
         03:5a:2e:6c:44:b7:1f:75:b1:76:88:db:a9:6f:c7:66:b5:0f:
         e7:af:9b:f4:e1:01:de:91:a6:35:0f:6a:7c:1d:07:16:3d:7a:
         f6:5a:51:8e:7f:94:a8:93:d1:ba:89:fd:c0:3b:24:a8:9a:8f:
         c4:a1:89:fa:bc:72:a3:e5:61:13:e0:af:70:cd:4d:68:99:0e:
         f6:39:7b:fc:2d:4c:c9:08:50:46:50:7c:45:c4:53:19:d4:f7:
         65:95:eb:9c:2a:f9:5d:6b:1f:26:7d:53:50:b9:b6:56:36:00:
         b6:17:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:33:42 2026 by rpki-client